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TO OR ONE MORE DEVICES ON A 
COMMUNICATIONS NETWORK 



-310 




END 



FIG. 3 



REPLACEMENT SHEET 



4/16 




REPLACEMENT SHEET 



5/16 



O 

o 

LO 



CNI 
O 
LO 



CNI 
CNJ 
LO 



O 
CNJ 
LO 



CO 
LO 



CO 
LO 



LO 



CNI 
x — 

LO 



O 
LO 



OO 
O 
LO 



CO 
O 
LO 



o 

LO 



LAYER 


CO 


— 


RATE LIMIT 


NONE 


J 


DENY? 


ON 




PRIORITY 






VLAN 


LO 
LO 


J 


MASK 


255.255.255.0 




VALUE 


10.20.54.0 


J 


TYPE 


IP ADDRESS 
BILATERAL 




STATUS 


ENABLED 




NAME 


CONTAIN 
SUBNET 54 





o 
o 

CO 



LO 

d 

LL 



CNJ 
O 
CO 



1 



o 
o 



CNJ 

T~ 

CO 


RULE 4 


CONTAIN 
SUBNET 57 




o 

CO 


RULE 3 


CONTAIN 
SUBNET 56 








LO 




oo 

CO 


RULE 2 


CONTAI 
SUBNE' 




CO 

o 

CO 


RULE 1 


CONTAIN 
SUBNET 54 








ENG 
<\FFIC 








Q- cr 




c 

O 
CO 


NAME 


CONTAIN 
SUBNET! 





CNJ 



CD 

O 
LL 



o 



oo 

CD 



co 
o 



o 









SERVICE 


CONTAIN IP ENG 
SUBNET TRAFFIC 




SERVICE 


CONTAIN 
ICMP 




SERVICE 


CONTAIN 
DHCP 




DEFAULT 
PRIORITY 


NONE 




DEFAULT 
VLAN 


LO 






ERING 




NAME 


ENGINE 





REPLACEMENT SHEET 



6/16 



El 



O 



CL 
< 



CD 
O 

cz 

03 

O 



CD 



_CD 

a: 



CD 



CO 

o 

*co 
(/> 

O 
o 

as 



CD 
CL 



O 

M 

CD 

CO 
I — 
CD 

05 



CD 
Ql 



03 
O 
4= 
"t/> 

in 

_OJ 

O 
o 

03 



2 

-2J 
i2 

s 

CO 

CO 

S> 
■o 
< 

Q_ 



CD 
_CD 

co 

CO 
CO 
CD 

"O 
"O 

a, < 

| 



5 

_o 

CD 
jQ 

X 

o 
"x 

jD 
CD 



CO 

to 
CD 



_o 

CD 
_Q 

X 

o 

CD 
O 

*o 
_c 
o 

CD 



T3 c 

-a c 

It x ^ 
5 x^ 

„ x' 

2 S~ 



o 

CD ^ CD 
C X CD 
UJ2< CO 



O 
LO 
CN1 



CD 



LO 
LO 
CNJ 

LO 
LO 
CNJ 

LO 
LO 
CN| 



CO 
CD 



REPLACEMENT SHEET 



7/16 



□ 
□ 



Q- 
CO 

o 

CD 



Si 

CD 

LZI 




a a3 



CD 



r ° 
1 o 



-23 

X"cd 
"CD 

Q 



CD 



CD 
CO 

O 



to 

CD 
CO 
CO 



CD 



O 



o 

CD 
CD 
GO 



O 
CD 
CD 
CO 



CO 



CO 



S 
_o 

CD 
_c 

E 
o 



83 



UJ-O C O CL— < _E 



^- CNJ IT) (D N OO O) ' 



CD 

o 
cr 

CO 

O 



c 

CD 
CD 
C 

"o> 

£Z 
LU 

LO 



3 
> 



CO 

O 
O 
i_ 



.2 

CL 

<3 

CO 

o 
o 

H 



-T5- 

CD 



a> 

XJlOLOtOlOC/D 



O 



co co ca co 



co -2 



CO CO CQ CO CO q § q § CO CO CO CO 



{2 
£ 

. d-O- t T^"^^ co<c o 

; <C CQCJ> LL__^ ^ DCCO^ 



1 1 



a> 



o o o o o 

6 6 6 6 ©-•. 



@@@@ 



o o o o 
<-5<_5<_>CJ> 

6 6 66 



CDCUCDCUCUCDCDCD <L> . 

QQQQQQr " 



CJ> 

O 

O 



-:«!«: -!-:«« 

666666666 



66666 



6-6- 



REPLACEMENT SHEET 



8/16 



m 
a 
a 



o, 

<D 



O 

i2| 



CD 



LUl 

CD 




D g> 



«9 



r o 
o 



XCD 



CO 



CD 
CO 

O 



co 
_CD 
O 



CO 

iS 

CD 

Q 



c_> 

05 



CD 

cz 

_Q 

Z3 

CO 

o> 
c: 
LU 

Q. 

iS 
"c 
o 
O 

~cd 
o 

CD 
CO 

*o 

CO 



o 
O 



■ r — co -^r 

-cz *EZ -cz -cz 
o o o o 

'CZ "CZ "CZ 'CZ 

D_ Q_ Q_ Q_ 

o> czo cx> "czr> 



cz 


cz 


cz 


cz 


'CZ 




*cz 




CD 


d> 


CD 


CD 


CD 


CD 


CD 


CD 






cz 




"Er> 


"En 


"cn 


"c5> 


cz 
LU 


cz 
U_J 


cz 
LU 


CZ 
LU 


CO 


LO 


LO 


LO 


cz> 


<zz> 


<=> 


<=> 


to 


LO 


LO 


LO 


LO 


LO 


LO 


LO 


CVJ 


CVJ 


CVJ 


CVJ 


LO 


LO 


LO 


LO 


LO 


LO 


LO 


LO 


CVJ 


CVJ 


CVJ 


CVJ 


LO 


LO 


LO 


LO 


LO 


LO 


LO 


LO 


CNJ 


CVJ 


CVJ 


CVJ 


cz> 


O 


C=> 


CT> 




LO 


co" 




LO 


LO 


LO 


LO 


czz> 


<ZZ> 


cr>" 


cr> 


CVJ 


CVJ 


CVJ 


CVJ 


cz> 


C=> 


<rz> 


czz> 










"2 


"2 


~co 


1§ 


a> 


CD 


a5 


CD 


"to 


CO 


"co 


"ca 


a5 


CO 


co 


co 


CO 


CO 


CO 


CO 


CO 


CO 


CO 


CO 


a> 


CD 


CD 


CD 






TZi 


~c5 


"CZJ 




-O 


"O 


«=C 




<C 


<c 


Q_ 




Q_ 


Q_ 



(3 

LL 



CD CD CD CD 
_Q _Q _Q _Q 
03 C\3 CO CO 



CD CD CD CD 

cz cz cz cz 

_cz» _o _a _czi 

Z3 Z3 Z3 Z3 

CO CO CO CO 

cz: cz cz cz 

CO CO CO CO 

8 8 8 8 
©00© 



I 

"CD 



CD 

r> J5lolololoco ^ 

rv ^ Z3 « -«— « -•— ■ r"S Q— 

"p== GO CD CD CD <DZ=Z rt3 ~|~ 

Si55x Xl^tz: cz cz czcq £ 

_^Q^r r 39=. t ri zzt zzi zzj Z3_f" co.roQx 
cz4= S^^ULl CO CO co co^-&QL__cz^ ~z^^ 

ccc czQ_^^S t a>^^P^ 



cS^^ 

^O-CO 
-h "CD 



~CD 



"a> 



o 

c5 



CO CO V* 

116 



. „ _ co co co co clo— 1 tzi^ ca-=c o 

cccccy^y^cccczcccccizizc;!^ 
c3c3c3o<3©@@@c33^ 

•4«J«J«1«S sill «j^«t^«j«j«j^^^«j^^ 

6 6 6 6 6- 6666666666666 



"o 

Q_Q_Q_q cz 

czoczoczo^ 



o 



<<<<< 

66666 



REPLACEMENT SHEET 



9/16 



B 
□ 



ml 

CO 

o 

l2l 

CD 



Si 




D g> 



€9 



a> 
"cn 
co 



a o 
O 



X a> 



CD 
O 

>*2 



CD 

IS 

CO 



CD 
CO 

E?_o 
O 



CO 
CD 
CO 
CO 



CD 



CO 
CD 

o 

'cl 

CD 
CD 

cr 

CD 



CO 



CD 
CD 



CD 



CO 



CO 



in 

m 



o 

CD 
CD 
CO 



CD 



CD 3 < CO 

Ei5J O 

CO CD > O 

z 9 B D 



o 
o 

CO 
CD 
Q 



CD 
CD 
CZ 

'co 
c= 

CD 
CD 



-2 
_>> 
c 
o 

"co 
> 

CO 

CD 
-Q 



CD 
TD 

cz 
CD 



O 
CO 

CD 
CD 

c 

CO 
£Z 
LU 

CD 



CD 
CD 

*o 

.CO 

"53 

cz 
cz 
o 
52 

CD 
OL 

CO 

cz 



=3 

o 
a 
o 

< 

■o 

cz 

CO 

CO 
_CD 

CO 
CO 
CD 



CO 
CO 
CD 

o 
a 

< 



CO 

<D CJ> 
CO 

£ ~S 

a> o 
_g><<lLJjJO 



Q_ 



BO- 



-~ CO =3 

a3 S 
_co 8 

zr> <c 

a> cz 

IE CO 
<D TO 

OCT CO 



REPLACEMENT SHEET 



10/16 




REPLACEMENT SHEET 



11/16 

START 




1300 



CONFIGURE A STATE OF ONE OR 
MORE PORT MODULES OF THE 
NETWORK ENTRY DEVICE 



-1301 



CREATE ONE OR MORE ROLES WITH 
RESPECT TO THE COMMUNICATIONS 
NETWORK, EACH ROLE ASSOCIATED 
WITH ONE OR MORE PACKET RULES 

I 
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DISTRIBUTE THE ONE OR MORE ROLES 
TO ONE OR MORE NETWORK DEVICES 
OF THE COMMUNICATIONS NETWORK 



-1304 



CONFIGURE ONE OR MORE PORT 
MODULES OF THE NETWORK ENTRY 
DEVICE WITH A DEFAULT ROLE 



ASSIGN ONE OF THE ROLES TO A USER 
OF THE COMMUNICATIONS NETWORK 
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STORE USER INFORMATION ABOUT THE USER ON THE 
COMMUNICATIONS NETWORK, THE USER INFORMATION 
INCLUDING IDENTIFICATION INFORMATION OF THE USER 
AND THE ASSIGNED ROLE OF THE USER 
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RECEIVE A LOGIN PACKET FROM THE USER'S DEVICE AT 

AN ENTRY PORT MODULE OF THE NETWORK ENTRY 
DEVICE, THE LOGIN PACKET INCLUDING IDENTIFICATION 
INFORMATION OF THE USER 
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AUTHENTICATE THE RECEIVED 
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DETERMINE THE ROLE 
OF THE USER 
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CONFIGURE THE ENTRY PORT MODULE 
WITH THE PACKET RULES ASSOCIATED 
WITH THE DETERMINED ROLE 



RECEIVE A PACKET FROM THE USER'S 
DEVICE AT THE ENTRY PORT MODULE 



1324 




-1320 



-1322 



1326 



L 



1327 



APPLY PACKET RULES 
TO RECEIVED PACKET 
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FIG. 13B 



1328-^ X IS 
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PORT MODULE 
CONFIGURED TO APPLY 
FILTERING TO PACKETS 
INCLUDING A VLAN 
HEADER 
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YES' 
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APPLY FILTERING 
TO PACKET 
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DROP 
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END 
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APPLY THE USER-BASED PACKET 
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